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FIG. 1 



RECEIVE INITIALIZATION 
REQUEST MESSAGE WITH 
AUTHORIZATION DATA AND 
BLINDED UNVALIDATED 
CERTIFICATE 




VALIDATE BLINDED 
UNVALIDATED CERTIFICATE 
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SEND INITIALIZATION 
RESPONSE MESSAGE 
WITH BLINDED 
VALIDATED CERTIFICATE 
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FIG. 2 



VOTER 
UNBLINDS VALIDATED 
BLINDED CERTIFICATE 



VOTING CENTER RECEIVES 
TRANSACTION 
REQUEST MESSAGE 
WITH UNBLINDED 
CERTIFICATE 
FROM VOTER 
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FIG. 3 
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VOTER PROVIDES 
AUDIT SECRET TO VOTING CENTER 



VOTING CENTER RECEIVES 
TRANSACTION REQUEST MESSAGE 
THAT INCLUDES BLINDED AUDIT 
SECRET AND BLINDED UNVALIDATED 
CERTIFICATE 
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VOTING CENTER SENDS AUDIT 
REQ UEST MESSAGE TO VOTER 



VOTING CENTER RECEIVES AUDIT 
RESPONSE MESSAGE INCLUDING AUDIT 
RESPONSE DATA FROM VOTER 
I 



VOTING CENTER DETERMINES 
IF TRANSACTION 
REQUEST MESSAGE IS LEGITIMATE 
USING AUDIT RESPONSE DATA 



TRANSACTION 


NO 


TERMINATED 
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IS 

TRANSACTION 
REQUEST MESSAGE 
.LEGITIMATE? 

YES 
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VOTING CENTER VALIDATES 
BLINDED UNVALIDATED CERTIFICATE 



VOTING CENTER SENDS BLINDED 
VALIDATED CERTIFICATE TO VOTER 
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FIG. 4 



VOTING CENTER STORES 
MESSAGES PROTOCOL RUN 
IN RECOVERY DATABASE 



'DOES VOTING^ 402 
CENTER RECEIVE 
CUSTOMER ACKNOWLEDGEMENT" 

OR DOES PREDETERMINED. 
TIME PERIOD 
JELAPSEt, 




VOTER DETERMINES THAT 
CONNECTION IS BROKEN 
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VOTER REPLAYS 
PROTOCOL RUN 
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VOTING CENTER CONSULTS 
RECOVERY DATABASE 
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RETURN 



YES 



IS 
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ACKNOWLEDGEMENT 
FROM VOTER INDICATED 
IN RECOVERY 
DATABASE 

NO 



VOTING CENTER 
RETURNS RESPONSE STORED 
IN RECOVERY DATABASE 
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